PRIVACY NOTICE UNDER THE PERSONAL DATA PROTECTION LAW
Pursuant to Article 10 of Law No. 6698 on the Protection of Personal Data (“KVKK”)
Version: 1.0 | Last Updated: May 2026
1. IDENTITY OF THE DATA CONTROLLER
Your personal data is processed by FlowSmart Su Tasarrufu Teknolojileri San. Tic. Ltd. Şti. (“FlowSmart” or the “Company”), acting as the data controller, within the scope of Law No. 6698 on the Protection of Personal Data (“KVKK”), based on the information set out below.
| Data Controller Information | |
|---|---|
| Company Name | FlowSmart Su Tasarrufu Teknolojileri San. Tic. Ltd. Şti. |
| Address | Yakuplu Mh. 63. Sk. Uğurlu Plaza No: 19/7 34524 Beylikdüzü, İstanbul, Türkiye |
| Phone | +90 212 875 81 27 |
| info@flowsmart.tr | |
| Website | www.flowsmart.tr |
| MERSIS No. | 0-733 0346 9890 00 13 |
| Trade Registry No. | 626004 (Istanbul Chamber of Commerce) |
| Tax Office / No. | Beylikdüzü Tax Office / 733 034 6989 |
| Registered E-mail (KEP) | mannesmannkimya@hs01.kep.tr |
| ℹ️ The processing of personal data arising from shopping activities carried out through our affiliated e-commerce website www.iyialisverisler.com is addressed separately under that site’s own Privacy Notice: www.iyialisverisler.com/kvkk-aydinlatma-metni |
2. PERSONAL DATA PROCESSED AND THEIR CATEGORIES
Within the scope of the activities carried out through our corporate website www.flowsmart.tr, your personal data is processed in the following categories:
| Data Category | Data Processed | Collection Method |
|---|---|---|
| Identity data | Name, surname | Contact form, newsletter subscription |
| Contact data | E-mail address, phone number | Contact form, newsletter subscription, WhatsApp |
| Company / organization information | Company name, title (corporate inquiries only) | Contact form |
| Transaction security | IP address, cookie data, log-in / transaction records | Automatic — during website visits |
| Marketing data | Newsletter subscription, e-mail open / click statistics | Explicit consent only |
3. PURPOSES OF PROCESSING PERSONAL DATA
Your personal data is processed for the following purposes:
- Responding to inquiries regarding our products and services
- Carrying out technical support and corporate communication
- Managing the newsletter and technical content subscription
- Sending campaign, product-update and announcement communications (with explicit consent only)
- Ensuring website security and preventing fraud
- Fulfilling legal obligations
4. LEGAL BASES FOR PROCESSING PERSONAL DATA
| Legal Basis | Field of Application |
|---|---|
| Legitimate interest (Art. 5/2(f)) | Contact forms, website security, technical support |
| Legal obligation (Art. 5/2(ç)) | Statutory notification and retention obligations |
| Explicit consent (Art. 5/1) | Newsletter subscription, marketing communications |
5. TRANSFER OF PERSONAL DATA
Your personal data may be shared with third parties within the framework of Articles 8 and 9 of the KVKK and strictly limited to the purposes set out below:
| Recipient Group | Purpose of Transfer |
|---|---|
| E-mail / newsletter infrastructure providers | Sending newsletters and notifications |
| Competent public authorities and institutions | Mandatory notifications under legal obligations |
| The Company’s other website (iyialisverisler.com) | Operated by the same data controller; the data remains within the same legal entity |
Where your personal data is transferred abroad, the safeguards set out under Article 9 of the KVKK (an adequacy decision or a standard contract) apply.
6. RETENTION PERIOD OF PERSONAL DATA
| Data Type | Retention Period | Legal Basis |
|---|---|---|
| Contact form records | 3 years | Art. 146 of the Turkish Code of Obligations (TBK) |
| Newsletter subscription and consent records | Until unsubscription + 3 years | Law No. 6563 on the Regulation of Electronic Commerce; KVKK Art. 5/1 |
| Technical logs and transaction security records | 2 years | Law No. 5651 |
| Marketing consent records | Until consent is withdrawn | KVKK Art. 5/1 |
Personal data whose retention period has expired is securely deleted, destroyed, or anonymized in accordance with Article 7 of the KVKK.
7. YOUR RIGHTS AS A DATA SUBJECT
Under Article 11 of the KVKK, you have the following rights:
| (a) To learn whether your personal data is being processed | (e) To request deletion or destruction of your data under Article 7 of the KVKK |
| (b) To request information if it has been processed | (f) To request that corrections or deletions be notified to third parties to whom the data has been transferred |
| (c) To learn the purpose of processing and whether it is used in accordance with that purpose | (g) To object to a result arising to your detriment from analysis conducted solely through automated systems |
| (ç) To know the third parties to whom your data is transferred, domestically or abroad | (ğ) To claim compensation for damages arising from unlawful processing |
| (d) To request correction of incomplete or inaccurate data |
8. HOW TO EXERCISE YOUR RIGHTS
You may apply to us through the following channels to exercise the rights listed above:
| Application Channel | Details |
|---|---|
| info@flowsmart.tr (please state “KVKK Application” in the subject line) | |
| Postal / Wet-Signed Application | Yakuplu Mah. 63. Sok. No: 19/7, 34520 Beylikdüzü, İstanbul, Türkiye (marked “KVKK Application”) |
| Phone | +90 212 875 81 27 (for information purposes only; formal applications must be made by e-mail or post) |
Your application must clearly state your full name, contact details, and the right you wish to exercise. Your request will be concluded within 30 (thirty) days following identity verification.
9. NEWSLETTER SUBSCRIPTION AND İYS
Commercial electronic message consents given under the newsletter subscription are recorded with the İleti Yönetim Sistemi (Message Management System — “İYS”) within 3 business days, in accordance with Law No. 6563 on the Regulation of Electronic Commerce. You may cancel your subscription at any time by:
- Clicking the “Unsubscribe” link in the newsletter you received,
- Through the iys.org.tr portal or the İYS mobile application,
- Sending an e-mail to info@flowsmart.tr.
Once your opt-out request is received, the sending of messages will be stopped within 3 business days at the latest.
10. CHANGES TO THIS PRIVACY NOTICE
This Privacy Notice may be updated in line with changes in legislation and business processes. Updates take effect as of the date they are published at www.flowsmart.tr/en/pdpl-information-text.
FlowSmart Su Tasarrufu Teknolojileri San. Tic. Ltd. Şti. | flowsmart.tr | KVKK Privacy Notice